Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/juqITX2f0sRdR8Uy1wt369eqrrI.roa
File: juqITX2f0sRdR8Uy1wt369eqrrI.roa (raw, json)
Hash identifier: WDPB8ZquQjfBLsSfBlWqwV9mKjb5NaQX8NIxdNXaDR4=
Subject key identifier: 8E:EA:88:4D:7D:9F:D2:C4:5D:47:C5:32:D7:0B:77:EB:D7:AA:AE:B2
Certificate issuer: /CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Certificate serial: 0194DC5D8F21E2DA646F4E58DA4569777905
Authority key identifier: 31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/juqITX2f0sRdR8Uy1wt369eqrrI.roa
Signing time: Thu 06 Feb 2025 17:45:06 +0000
ROA not before: Thu 06 Feb 2025 17:45:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a0e:4585::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 20 Feb 2025 17:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:dc:5d:8f:21:e2:da:64:6f:4e:58:da:45:69:77:79:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Validity
Not Before: Feb 6 17:45:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8eea884d7d9fd2c45d47c532d70b77ebd7aaaeb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9d:c9:a3:39:3b:e2:28:6a:a2:1a:8f:4d:16:
8e:87:d4:3e:42:c9:f8:b7:6b:41:f8:75:d4:2d:61:
e6:e1:a5:fa:bb:e2:e5:24:cf:91:eb:5d:58:f6:b2:
7e:35:a0:63:bc:33:0a:8e:be:6c:11:27:3f:78:3a:
2b:b2:f8:e0:af:69:7a:43:77:82:f0:2b:41:4a:69:
88:04:a2:ee:e2:6d:83:df:89:03:b1:da:b9:6c:19:
6e:c3:8f:40:c9:79:3f:09:f3:80:2d:68:5b:e4:71:
7c:90:84:60:9e:f2:0c:d7:a8:e3:e3:6a:b8:9b:97:
b0:e8:67:65:0e:fd:cd:ef:6c:8e:03:23:69:cf:bf:
e4:d8:08:49:4c:98:e2:2e:38:34:a8:1c:6f:09:7f:
dc:27:28:df:f0:c0:63:6b:e8:f4:30:0e:d3:f4:f4:
f8:dd:5a:f7:93:ee:30:13:70:37:93:29:3e:4f:b1:
1a:f3:b3:a2:cb:83:bd:dc:1a:b0:e6:bf:ef:7c:01:
a7:41:89:68:47:df:cb:c6:f3:16:b1:e0:e3:10:30:
df:5c:2a:64:f8:3a:21:a2:51:72:54:1b:18:15:97:
f4:91:a7:7b:8f:0a:17:dd:39:20:78:06:ef:fd:ca:
73:38:f9:bb:a5:ec:97:94:91:d4:d5:e3:fc:20:e0:
f0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EA:88:4D:7D:9F:D2:C4:5D:47:C5:32:D7:0B:77:EB:D7:AA:AE:B2
X509v3 Authority Key Identifier:
keyid:31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/juqITX2f0sRdR8Uy1wt369eqrrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4585::/32
Signature Algorithm: sha256WithRSAEncryption
1e:ea:f8:f3:e0:6d:02:5d:2e:bc:ad:ff:97:60:6a:bd:22:3e:
83:24:6b:e8:0f:ec:40:dc:53:23:5b:77:56:c1:b9:73:9b:ed:
a6:e8:ad:46:19:b8:38:56:b6:b9:a7:d9:88:f0:81:52:d4:cb:
67:1a:b5:7e:fb:f2:bf:70:a4:bd:f5:dd:f6:68:2a:34:a3:86:
dc:31:1e:fa:81:15:eb:dd:2a:1a:85:cb:a9:40:56:eb:6e:ea:
dc:ad:6d:2b:26:4c:40:70:16:6d:fa:28:d2:45:d1:ba:14:20:
32:4c:b0:93:74:8f:9d:28:f1:e6:52:33:db:de:75:9a:f1:dd:
70:73:67:1e:af:84:43:90:6a:06:d7:ff:1c:8c:ad:f7:94:2d:
22:d9:b0:89:98:cd:ae:ac:e6:ab:6b:cf:5c:4b:c8:56:9e:08:
bc:6e:a2:c3:07:e4:3f:1d:90:7d:ce:8f:cb:e8:0c:40:d8:3c:
08:c2:cc:b2:9e:cc:9b:21:88:4f:7a:34:62:f5:c3:c9:a6:f4:
71:fd:17:e0:f9:89:3d:99:e6:b1:9b:f1:61:72:3b:66:e4:8b:
95:6a:d4:a6:5c:9d:b6:06:bd:46:d0:46:a0:c5:0c:49:14:96:
5b:2f:30:93:8d:42:7a:50:52:69:66:15:8c:20:da:0e:e7:83:
2a:a9:11:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:58:44 2025 by rpki-client